Lucene search
PRIOn knowledge basePRION:CVE-2024-23348HistoryJan 23, 2024 - 10:15 a.m.
Input validation
2024-01-2310:15:00
PRIOn knowledge base
www.prio-n.com
4
input validation
vulnerability
a-blog cms
remote attacker
arbitrary javascript
svg file
nvd
Improper input validation vulnerability in a-blog cms Ver.3.1.x series versions prior to Ver.3.1.7, Ver.3.0.x series versions prior to Ver.3.0.29, Ver.2.11.x series versions prior to Ver.2.11.58, Ver.2.10.x series versions prior to Ver.2.10.50, and Ver.2.9.0 and earlier allows a remote authenticated attacker to execute arbitrary JavaScript code by uploading a specially crafted SVG file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| a-blog_cms | le | 2.9.0 | |
| a-blog_cms | ge | 2.10.0 | |
| a-blog_cms | lt | 2.10.50 | |
| a-blog_cms | ge | 2.11.0 | |
| a-blog_cms | lt | 2.11.58 | |
| a-blog_cms | ge | 3.1.0 | |
| a-blog_cms | lt | 3.1.7 | |
| a-blog_cms | ge | 3.0.0 | |
| a-blog_cms | lt | 3.0.29 |
Related
cvelist
cvelist
CVE-2024-23348
2024-01-23 09:39:14
cve
cve
CVE-2024-23348
2024-01-23 10:15:10
nvd
nvd
CVE-2024-23348
2024-01-23 10:15:10
jvn
jvn
JVN#34565930: Multiple vulnerabilities in a-blog cms
2024-01-22 00:00:00